Ceci est une version HTML d'une pièce jointe de la demande d'accès à l'information 'EDPS mapping exercise'.

Name of service
Web site
Wikipedia
Provider
Provider location
Hosting
Open source Price
User limit
self-hosting
Zoom
Zoom
wiki_zoom
Zoom Video Communication Inc.
San Jose, CA, U.S.
possible in
no
4 plans
Business plan
both in cloud
and on-
GoToMeeting
GoToMeeting
wiki_GoToMeeting
LogMeIn
Boston, MA, U.S.
premise
no
3 plans
hosting
available
GoToWebinar
GoToWebinar
N/A
LogMeIn
Boston, MA, U.S.
only web-
based
no
3 plans
CyberLink U Meeting
CyberLink U Meeting
wiki_Cyberlink
CyberLink Corp.
New Taipei City, Taiwan
no self-
hosting
no
4 plans
Premise-to-
Cloud
BlueJeans
BlueJeans
wiki_BlueJEans
BlueJeans Network
San Jose, CA, U.S.
Integration in yes GitHub
3 plans
Enterprise
plan
Google Hangouts Meet
Google Hangouts Meet
wiki_GHangouts
Google LLC
Mountain View, CA, U.S.
no self-
hosting
no
free
100

Cisco WebEx
Cisco WebEx
wiki_WebEx
Cisco Webex, BT cloud (for the EP The Netherlands, but the
no self-
setup), Cisco
parent company is US based hosting
no
4 plans
300
Cisco Jabber
Cisco Jabber
N/A
Cisco
U.S.
self-hosting
possible
no
2
Cisco Webmeeting
Cisco Webmeeting
N/A
Cisco
The Netherlands, but the
self-hosting
parent company is US based possible
no
10 in personal room, 25
in booked room
Skype for Business
Skype for Business
wiki_SkypeforB
Microsoft
Redmonds, WA, U.S.
no self-
hosting
no
free
250
no self-
Microsoft Teams
MS Teams
wiki_MSTeams
Microsoft
Redmonds, WA, U.S.
hosting,
no
free w/office365 subscription
300
cloud only
Jitsi
Jitsi
wiki_Jitsi
8x8 Inc.
Campbell, CA , U.S.
self-hosting
possible
yes GitHub
free
75
Only self-
Bigbluebutton
Bigbluebutton
wiki_Bigbluebutton
Bigbluebutton Inc.
Ottawa, Canada
hosting
yes Github
free
100
possible
Apache OpenMeetings
Apache OpenMeetings
Wiki_AOM
ASF
has OS
(Apache Software Foundation)
U.S.
self-hosting
possible
components
free
N/A
Apple FaceTime
Facetime
wiki_FT
Apple Inc.
Cupertino, CA, U.S.
no self-
hosting
no
free
32

Forum Vision
hopin.to
Forum Europe
UK
no self-
hosting
no
size-dependent
Only self-
Pexip
pexip.com
Pexip Europe
Norway
hosting
no
possible
Tixeo
tixeo.com
Tixeo
France
self-hosting
possible
no
Wire Enterprise
wire.com
Wire
Switzerland
self-hosting
possible
no
4
Whereby
whereby.com
Whereby
Norway
no self-
hosting
no
3 plans
50

Web client
Desktop client
 Mobile client
Telephone calls
Screen
sharing
Moderation1 Hand raising
Recording
Room splitting Link
Complete
Transfers outside of EU
(yes)
yes
yes
yes, add-on
yes
yes
yes
yes
yes, 50 max
Zoom_PP
yes
yes, mainly U.S.
Common LogMeIn PP,
yes
yes
yes
yes
yes
yes
no
yes
no
GoToMeeting_PP
referring to the use of
websites not of the
yes, U.S. and global
product.
Common LogMeIn PP,
yes
yes
yes
yes
yes
yes
yes
yes
no
GoToWebinar_PP
referring to the use of
websites not of the
yes, U.S. and global
product.
yes (Chrome)
yes
yes
no
yes
yes
no
yes
no
U Meeting_PP
no, DPO contact missing yes, global
yes
yes
yes
yes
yes
yes
yes
yes
yes
BlueJeans_PP
no, Art. 6 GDPR legal
bases missing !
yes, mainly U.S.
yes
yes
yes
yes
yes
yes
yes, 'nod' extension
yes
(yes)
Google_PP
yes
yes

yes, 12 data centres worldwide;
costumer-generated data stored on
yes
yes
yes
yes
yes
yes
yes
yes
no
Cisco_PP
yes, except naming a DPO the closest server, for us this is
Amsterdam, NL. WeBex Analytics
data is stored in CA/TEX, U.S, billing
data in TEX/NC U.S.
no
yes
yes
no
yes
no
no
yes
no
Cisco_PP
yes
yes(via Jabber)
yes (via Jabber)
yes
yes
yes
no
Cisco_PP
yes
yes
yes
yes
yes
no
no
yes
no
Skype for B_PP
yes, except naming a DPO yes
yes
yes
yes
yes
yes
only channel
moderation
yes
yes
no
MS Teams_PP
yes, except naming a DPO yes, with additional information on
the location of data at rest
yes (Chrome)
yes
yes
yes
yes
yes
no
yes
no
Jitsi_PP
yes, together with 8x8
Company Privacy Notice yes
yes (listing only consent
as legal basis, strange
given the purposes
yes (Chrome, Ff)
yes
yes
yes (VoiP needed) yes
yes
yes
yes
yes
BigBlueButton_PP
include legal process,
no indication in PP
"emergency to protect
the personal safety of any
person")
yes
no
yes
yes
yes
yes
yes
yes, personal information of EU/EEA
yes (except no DPO, only users  is controlled by Apple
no
yes
yes
yes
yes
no
no
yes
no
FT_PP
a contact sheet for
Distribution International Limited in
regions/countries)
Ireland, and processed on its behalf
by Apple Inc

yes, U.S. and global ("By registering
for and using Pexip services, you are
accepting to the transfer of data to
yes (Chrome, Ff)
yes
yes
yes
any country in which Pexip and its
affiliates maintain facilities")
https://support.pexip.com/hc/en-
us/articles/208885088-List-of-Pexip-
Service-PoPs
yes
yes, U.S. and global
no
yes
yes
yes
no
yes
yes
yes
yes, Switzerland
yes

3rd party
Purposes4
PD shared with non-processors
Data Processing
Addendum
Link
Complete
Compliant
banner
trackers
End-to-end encryption
User premissions
data centers performance monitoring;
legal advisors for legal reasons; third
aggregated data analytics; respond to support party service providers such as public
specific
requests; product development; personalised cloud storage vendors, carriers,
not available
Zoom_CP
cookies are
no
marketing
payment processor
not listed
research and analysis; data analysis, incl.
third party service providers; business
automated systems and ML for service
partners; affiliated companies within
integrated in
specific
no, session data protected by
improvement; personalised marketing
the corporate structure; as needed for LogMeIn DPA
privacy policy,
cookies are
128-bit AES encryption
communication;
legal purposes
section 3
not listed
research and analysis; data analysis, incl.
third party service providers; business
automated systems and ML for service
partners; affiliated companies within
integrated in
specific
no, session data protected by
improvement; personalised marketing
the corporate structure; as needed for LogMeIn DPA
privacy policy,
cookies are
128-bit AES encryption
communication;
legal purposes
section 3
not listed
advertising and direct marketing; provide
support and assistance, costumer feedback,
business partners; service vendors;
integrated in
specific
further marketing research and data analysis; authorized third-party agents or
not available
privacy policy,
cookies are
only in Enterprise plan
to meet conract obligations (no details which) contractors in order to provide Service
section 3
not listed
no explicit list available; advertisment and
business partners, costumers, suppliers,
specific
marketing; product development; to answer to service providers, vendors; auditors,
not available
BlueJeans CP
cookies are
supports standards-based
customer requests
legal advisors, other professional
encryption (AES-128)
advisors; credit reference agencies
not listed
service development; provide personalized
no data sharing with external
services, content and ads; measure
companies except: with consent; with
performance; improve safety and reliability of domain administrators and reseller who not available
not available
yes
service
manage accounts; for external
processing to affiliates; for legal reasons

yes (see
direct marketing; system diagnostics and
Cisco business partners and vendors,
https://www.cisco.com/c/da
product developpment; research and analysis competent DPA or other authority, law not available
not available
m/en/us/products/collateral/
of aggregated data
enforcement officials and government
conferencing/webex-meeting-
authorities
center/white-paper-c11-
737588.pdf)
yes (see
https://www.cisco.com/c/da
m/en/us/products/collateral/
conferencing/webex-meeting-
center/white-paper-c11-
737588.pdf)
direct marketing; system diagnostics and
specific
product developpment; research and analysis business partners, third parties for legal
cookies are
yes
of aggregated data
purposes if needed
Microsoft_DPA
Microsoft Cookies not listed
diagnostics, service development, direct
business partners, third parties for legal
specific
marketing
purposes if needed
Microsoft_DPA
Microsoft cookies cookies are
yes
not listed
affiliates,  a limited number of third-
party business partners, service
product development
providers, vendors, suppliers and other
contractors for the purpose of assisting not available
not available
yes
in providing, managing, deploying,
enhancing, or improving  services.
service development; personalized service
provision; direct marketing; phone numbers for affiliates; third party service providers;
yes (depends on
secondary fraud protection detection
disclosure for legal requests or process; not available
not available
not
available
configuration)
internal purposes, e.g. auditing; direct
affiliated service providers; for legal
specific
marketing; product development; research and purposes to public and governmental
not available
Apple Use of
cookies are
yes (incl. videostreams)
analysis with anonymised/aggregated data
authorities within or outside the
Cookies
country of residence
not listed

Probably no. See section 8.1
of the privacy policy "Please
be aware that internet
transmissions are never
completely private or secure
and that any message or
information you send on or
using Hopin may be read or
intercepted by others, even if
there is a special notice that a
particular transmission is
encrypted."
yes (incl. videostreams)
yes (incl. videostreams)
Yes for small meeting rooms
of 4 people. No for large
rooms (5 to 12 people). See
their privacy policy security
section

Desktop update frequency2
Mobile update frequency2 Potential Information
Security Risks5
Recent security incidents3
to be considered. High
4 times over the last 3 months, 4 times during the last 3
months,
probability due to recent
Zoombombing
security vulnerabilities
approx 4 updates/month
approx 4 updates/month
to be considered.
not available
not available
to be considered
not available
not available
to be considered
once in every few months, latest
March 2020
to be considered
no separate Hangouts meet
product update list available
to be considered

last updated Jan 31 2020
SLA with EP applies
SLA with EP applies
SLA with EP applies
To be considered.
European Commission
4 times over the last year
assessment applies
To be considered.
2-3 times/month
once in every few months European Commission
assessment applies
no history of updates available,
latest update April 2020
To be considered
3 times over the last month,
now BBB 2.2.5.
To be considered
To be considered
3 system updates over the last 2 system updates over the
year
last year
To be considered